# Help with subdomain verification

**URL:** <https://devforum.zoom.us/t/help-with-subdomain-verification/88977>\
**Category:** App Submission\
**Created:** [May 24, 2023, 5:09pm UTC](https://devforum.zoom.us/t/help-with-subdomain-verification/88977 "2023-05-24T17:09:40Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![tom-glyphic](https://avatars.discourse-cdn.com/v4/letter/t/839c29/32.png) [@tom-glyphic](https://devforum.zoom.us/u/tom-glyphic)\
**Post date:** [May 24, 2023, 5:09pm UTC](https://devforum.zoom.us/t/help-with-subdomain-verification/88977/1 "2023-05-24T17:09:40Z")

</div>

Hi,

I’m trying to submit my Zoom OAuth app for Marketplace approval, but running into some issues with the **Validate the domain** step.

We use different subdomains of one root `glyphic.ai` domain:

- Redirect URL for OAuth: `app.glyphic.ai`
- Deauthorization Notification: `maverick.glyphic.ai`

Do we need to verify both of these subdomains? Or just the root `glyphic.ai` domain?

Also is using verifyzoom.html the only way to do this, or can we use something like txt record DNS verification?

Thanks,  
Tom

---

<div class="post-metadata">

**Author:** ![kwaku.nyante](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/kwaku.nyante/32/23475_2.png) [@kwaku.nyante](https://devforum.zoom.us/u/kwaku.nyante)\
**Post date:** [May 24, 2023, 10:54pm UTC](https://devforum.zoom.us/t/help-with-subdomain-verification/88977/2 "2023-05-24T22:54:45Z")

</div>

Hello @tom-glyphic please check your DM for further instruction on Manual Domain Validation.

> [@Domain Validation Explanation](https://devforum.zoom.us/t/domain-validation-explanation/87699):
>
> What is Domain Validation? Every App that is to be [‘Published’](https://developers.zoom.us/docs/distribute/) or ‘Submitted for Review’ on the Zoom App Marketplace must go through domain validation. With this, Zoom ensures that all the listed App Endpoints and URLs are owned by the respective App/Company. Please note that this is a one-time verification process. Why do we employ it? Security. Zoom needs to make sure that the domains where the App is expected to receive Zoom callbacks are owned by the respective App/Company. Which App ha…

Regards, Kwaku